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(54) A controller area network 

(57) A controller area network (1 0) includes a plural- 
ity of nodes (14-19), the CAN (10) having a bus (11) 
including two or more signal wires (12, 13) the ends of 
which at each node (14-19) define respective first and 
second txjs terminations. Each node (14-19) Includes 
switches for optionally connecting the first and second 
ends of each respective signal wire (12, 13) together, 
whereby the node (14-19) is operable In a transparent 
mode, and switches for connecting a terminating resis- 
tor between two signal wires (12. 13) selectively at 
eithar the first temiination or the second termination. 
Each node (14-19) also includes a programmable 
device connectable to the bus (1 1 ), and switches for 
connecting the programmable device selectively to 
either the first termination or the second termination. 
The swrtches operate under the control of the program- 
mable devices and a plurality of the programmable 
devices Include a fault detectorfor detecting faults in the 
CAN (10). Upon detection of a fault by one of the fault 
detectors, the programmable devices at each node (14- 
1 9) terminate the CAN (1 0) at the first or second termi- 
nation, or cause transparency of the node (14-19) to 
permit continuous functioning of at least part of the CAN 
(10) regardless of the number or nature of the faults. 
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Description 

[0001 ] The (nvention relates to a controller area net- 
work (CAN) for use in real-time control, diagnostics and 
manufacturing support appHcattons especially, but not s 
exclusively, in motor vehicles such as tractors, combine 
harvesters, forage harvesters and construction industry. 
[0002] CAN'S are also used in other types of vehi- 
cles such as boats and cars, and also in static installa- 
tions such as industrial machines. w 
[0003] A controller area netv/ork is an assembly of 
electrical and electronic components for controlling a 
number of functional features In a machine such as a 
tractor. In a CAN there is a bus Interconnecting a 
number of nodes, each of which nodes contains a pro- fs 
grammable device. If the CAN is employed for use in a 
motor vehicle, the programmable devices may be 
responsible for controlling items such as the engine 
management system, the hydraulics, the transmission 
and ^e instrument display 20 
[0004] The interconnecting bus, typically compris- 
ing two signal wires, allows digital data to be communi- 
cated between each of the programmable devices in 
one direction at a time. Termination of the ends of the 
bus is necessary to prevent back reflection of digital 2s 
data when it reaches the end of the bus and so avoid the 
distortion of other digital data travelling in the bus. 1ypl- 
cally a resistor Is connected between the ends of the 
two signal wires at either end of the bus, so terminating 
it. 30 
[0005] If a fault occurs in the bus, however, the bus 
is no longer terminated correctly since bus ends exist on 
either side of the fault. The existence of an uninter- 
rupted bus end prevents the efficient communication of 
the digital data between the programmable devices, as 35 
a result of the aforementioned signal reflection. Without 
infomiation, which is required from the other program- 
mable devices in the CAN, the programmable devices 
may not function conectly resulting in possible failure of 
the CAN. 40 
[0006] A CAN system, proposed in WO-A-9B3G961 , 
seeks to overcome this problem by providing a bus 
whk;h Is split Into sections, wherein each section is con- 
nected to another by connecting circuits. Each of the 
connecting circuits is able to connect a node containing 45 
a prcgrammable device to the bus, and also to termi- 
nate the CAN on either side of the node when required. 
[0007] In WO-A-9830961 the connecting circuits 
monitor the status of the bus by trying to communicate 
with neighbouring connecting circuits. When a fault In so 
the bus is detected, the connecting circuits terminate 
the bus on either side of the fault and inform the other 
connecting circuits. This allows digital data to continue 
travelling along the bus In the normal manner, providing 
each of the programmable devices with the information ss 
that they require. 

[0008] A disadvantage of the CAN of WO-A- 
9830961 is that the occurrence of a further fault In the 



2 

bus means that digital data cannot travel all of the way 
along the bus to all of the programmable devices. The 
CAN fails completely if more than one fault occurs. 
[0009] Another CAN proposed in EP-A-0793156 
also seeks to provide a solution to the problem. A bus 
extends t)etween a number of nodes containing pro- 
grammable devices. Each of the programmable devices 
is able to monitor identifying messages that are trans- 
mitted by the other programmable devices. A faurt in the 
bus Is detected by an identifying message transmitted 
from one programmable device not being detected by at 
least one other programmable device. When this 
occurs, default values are used by each of the program- 
mable devices for any digital data that they are missing. 
This enables the CAN to continue functioning. 
[0010] A disadvantage of the CAN of EP-A- 
0793156 however, is that, although the CAN continues 
to function when a fault occurs, its performance is 
greatly reduced since all of the programmable devices 
function independently of each other. 
[0011] It is therefore an object of the present Inven- 
tion to overcome the drawbacks of the prior art by pro- 
viding a CAN which continues to function In a proper 
way even when faults occur in the bus. 
[0012] In accordance with a broad aspect of the 
present invention a CAN including a plurality of nodes is 
provided with a bus irtduding two or more signal wires 
the ends of which at each node define rsspective first 
and second bus terminations, wherein each node 
includes: 

switches for opttonally connecting the first and sec- 
ond ends of each respective wine together, whereby 
the node is operable in a transparent mode; 
switches for connecting a terminating resistor 
between the two signal wires selectively at either 
the first termination or the second tennination; 
a prcgrammable device operatlvety connectable to 
the bus; and 

switches for connecting the programmable device 
selectively to either the first termination or the sec- 
ond termination. 

[001 3] The CAN is characterised in that : 

the switches operate under the control of the pro- 
grammable device; and 

a plurality of the programmable devices each 
include a fault detector for detecting faults in the 
CAN, the programmable devices being such as to 
select, on detection of a fault by a said fault detec- 
tor, at each node: tennination of the CAN at the first 
or second termination; or transparency of the node, 
whereby to permit continuous functioning of at least 
part of the CAN regardless of the number or nature 
of the faults. 

[0014] Thus the controller area network of the 
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invention advantageously aDows the programmable 
devices to continue to function integrally with each other 
when a first fauR occurs in the bus, and also aliows the 
CAN to continue to function if a further fault or faults 
occur(s) in the bus. 5 
[0015] Further, advantageous features are defined 
In the dependent claims hereof. More specifically : 
[0016] The bus Is preferably an annular network. 
The CAN may, when programmed, allow nodes to be 
removed from the bus. or nodes to be added to the bus io 
up to a maximum of 30, without a need to reconfigure 
the bus or the remaining nodes. 
[0017] It is also preferable that a voltage divider e 
used as the temalnating resistor within each node. 
Advantageously, this enhances electromagnetic protec- 75 
tion of the switching within the nodes. 
[0018] In a preferred embodiment of the invention, 
each programmable device generates a differential bus 
signal which is encoded with specific voltage and timing 
data to be transmitted via the bus. The differential bus 20 
signal, when generated during idle bus periods of the 
programmable devices, is in a recessive state wherein 
the signal wires are undriven, and the differential volt- 
age between the signal wires is zero. The differential 
bus signal, when generated during non-idle bus periods 2S 
of the programmable devices, is In a dominant state 
wherein the bus signal wires are driven and the differen- 
tial voltage between the signal wires is greater than a 
chosen value. 

[001 9] It is preferable that the fault detector of each 30 
of the programmable devices Includes a counter. The 
counter records the number of errors It encounters dur- 
ing transmission of differential bus signals via the bus, 
whereby a said programmable device stops communi- 
cating with other programmable devices in the CAN 35 
when the number of communication errors recorded by 
its counter equals or exceeds 32. 
[0020] When at least one of the programmable 
devices stops communicating with the other program- 
mable devices in the CAN, means such as an isolator in ^ 
each of the programmable devices may isolate and 
check each branch of the bus in a sequential manner. 
[0021] In a further preferred embodiment of the 
invention, each of the programmable devices transmits 
unique and individual network management messages 45 
at periodic intervals. These network management mes- 
sages are received by the other programmable devtees 
in the CAN, and a first programmable device is recorded 
as 'missing" when a second programmable device fails 
to receive at least one network management message so 
transmitted t)y the first programmable device. 
[0022] Preferably a first programmable device is 
recorded as having an intermittent fault if some but not 
all of a number of network management messages 
transmitted by the first programmable device within a ss 
chosen time period have been received by a second 
programmable device. A first progranrunable devce may 
also be recorded as "inconsistent" if a network manage- 
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ment message, transmitted by the first programmable 
device, does not contain parameters that are compati- 
ble with those transmitted by the second programmable 
device. 

[0023] When a programmable devk» is recorded as 
missing by another programmat^e device, then each 
programmable device in the CAN nnay monitor the sta- 
tus of the programmable devtees which are connected 
to their immediate left and immediate right in the bus. 
Each programmable devk:e may then cause the CAN to 
terminate at the first or second termination of its node if 
it discovers that it is connected to a missing programma- 
tile device, or to select transparency of its node other- 
wise. 

[0024] The ability to select between termination and 
transparency assists in permitting the CAN to continue 
functioning following discovery of a fault. 
0OO25] A preferred embodiment of the invention Is 
now Gtescribed, by way of a non-limiting example, vyith 
reference to the accompanying drawings, In which : 

Rgure 1 is a diagrammatic representation of a CAN 
according to the Inventton in the form of an annular 
network; 

Figure 2 if a diagranrmiatlo representation of a node 
of a CAN according to the invention, the node con- 
taining a programmable device; 
Rgure 3A is a diagrammatic representation of 
switches employed by the programmable device of 
Rgure 2, when the CAN is terminated at the first 
tennination; 

Figure 3B is a diagramnr^tte representation of 
switches employed by the programmable devce of 
Rgure 2, when the node is in a transparent mode; 
Rgure 3C is a dlagrammatk: representation of 
switches employed by the programmable device of 
Rgure 3, when the CAN is terminated at the second 
termination; 

Figure 4 is a diagrammatk: representation of a volt- 
age divider which may be used as the temiinating 
resistors in Figures 3A-C; 

Rgure 5A is a diagrammatic representation of a 
shield for use in conjunction with the CAN of the 
invention within a node of a vehicle engine, the 
transmission, the hydraulics, the display and the 
arm rest; and 

Figure 5B is a diagrammatic representation of a 
similar shield for use within a node of a vehicle 
instrument cluster. 

[0026] Figure 1 shows a controller area network 10 
for a tractor. The CAN 10 Includes a bus 1 1, comprising 
two signal wires 12, 13. which interconnects six nodes 
14-19, and a further optional node 20 when required. 
The nodes 14-19 contain programnnable devices which 
control the functions of the transmission, the display, the 
instrument cluster, the hydraulics, the arm rest and the 
engine of the vehk^le. The optional node 20 contains a 
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programmable device which controls the function of the 
4 wheel drive capabilities of the vehicle when required. 
[0027] The first bus signal wire 12 is connected 
from a first bus output terminal 23 (Figure 2) of one of 
the nodes e.g. 14, to a first bus input tenninal 21 of the s 
next node 15, and so on, whereby it is connected 
between all of the nodes 14-20. The second bus signal 
wire 13 Is connected in a similar manner between a sec- 
ond bus output terminal 24 and a second bus input ter- 
minal 22 of each of the nodes. The signal wires 12 and to 
13 are respectively designated the CAN H (CAN high) 
and CAN L (CAN low) wires, as is well known in the 
CAN art 

[0028] As can be seen from Figure 2, an active ter- 
mination cin:nj]t 25 of a programmable device Is con- 15 
nected between the bus input tenninals 21 , 22 and the 
bus output terminals 23, 24 of each of the nodes 14-20. 
The active termination circuit 25 includes a switching 
circuit 26 as shown in Rgures 3A-C. 
[0029] Each of the programmable devices also 20 
includes a transceiver circuit 35, a CAN controller 39 
and a switch driving circuit 38. The transceiver circuit 35 
is connected between the active termination circuit 25 
and the CAN controller 39. The CAN controller 39 is 
also connected to the active tennination circuit 25 by the 2s 
switch driving circuit 38. 

[0030] The switching circuit 26 as shown in Figures 
3A-C, is connected across interconnecting wires 12A. 
13A which interconnect the bus input terminals 21 , 22 
and the bus output tenninals 23, 24, wrthin each of the 30 
nodes 14-20. First and second switches 29, 30 are pro- 
vided in the interconnecting wires 12 A, 13A, and third 
and fourth switches 31 , 32 are provided In two circuBs 
33. 34 which are connected in parallel to the intercon- 
necting wires 12A, 13A respectively. Each of the 35 
switches 29-32 is swrtchable between two positions A 
and B. 

[0031] A first resistor circuit 36 is provided between 
position A of the first switch 29 and the second Intercon- 
necting wire 1 3A, and a second resistor circuit 37 ts pro- 
vided between position A of the second switch 30, and 
the first interconnecting wire 12A. 
[0032] The transceiver cincuit 35 is connected 
across the third and fourth switches 31 , 32 so that it may 
be connected to either of terminals A or B of each of 45 
these switches. 

[0033] The switch driving circuit 38 Is connectable 
to control the position of each of the switches 29-32. 
[0034] When the switch driving circuit 38 drives all 
of the switches 29-32 to position A, as in Figure 3A, then so 
both the first resistor circuit 36 and the second resistor 
circuit 37 are connected between the interconnecting 
wires 12A, 13A, effectively terminating two ends of the 
bus within the node. The transceiver circuit 35 is con- 
nected across the two interconnecting wires 12A, 13A, 55 
effectively connecting it across the bus input tenninals 
21 , 22 of the node. This arangement of the switches is 
a first tennination mode of the node. 
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[0035] When the switch driving circuit 38 drives the 
first and second switches 29, 30 to position B, and the 
third and fourth switches 31 , 32 to position A. as in Fig- 
ure 3B, then the interconnecting wires 12A, 13A inter- 
connect the bus temnlnai inputs 21. 22 and the bus 
terminal outputs 23, 24. The transceiver circuit 35 Is 
also connected between the two Interconnecting wires 
12A, 13A. This anangement of switches is the tranispar- 
ent mode of the node. 

[0036] When the switch driving circuit 38 drives the 
first and second switches 29, 30 to position A, and the 
third and fourth switches 31 , 32 to position 8, as in Fig- 
ure 3C, then both of the resistor circuits 36, 37 ara con- 
nected between the Interconnecting wires 12A, 13A, 
effectively tenninating the two ends of the bus within the 
node. The transceiver circuit 35 is connected across the 
two interconnecting wires 12A, 13A» effectively connect- 
ing it across the bus output terminals 23. 24 of the node. 
This anrangement of the switches is the second temnina- 
tion mode of the node. 

[0037] Each of the resistors 40, 41 which are con- 
tained within the resistor circuits 36, 37 of the switching 
circuit 26 is a voltage divider 42 of a per se known kind, 
as shown In Figure 4. 

[0038] The controller area network also includes a 
shield wire 43, and a configuration wire 50, visible in 
Figure 1 . The shield wire 43 extends around the CAN. 
As best seen in Figure 2, it is connected from a shield 
output terminal 45 of each node, to a shield input termi- 
nal 44 of the next adjacent node so that the shield wire 
43 is connected between all of the nodes 14-20. The 
configuration wire 50 is connected in a similar manner 
between a configuration input terminal 51 and a config- 
uration output terminal 52 of each of the nodes 14-20. 
[0039] The shield input terminal 44 and the shield 
output terminal 45 of each of the nodes are connected 
within each of the nodes 14-20, apart from the node 
which contains the instrument cluster programmable 
devk», by a shield 46 as shown In Figure 5A. 
[0040] The shield 46 In Figure 5A includes a resis- 
tor 47 and a capadtor 48 connected m series to a clean 
ground. The node containing the Instrument cluster pro- 
grammable devfee is provided with a shield 46A as 
shown in Figure 5B. The shield 46A once again indudes 
a resistor 47A and a capacitor 48A connected in series 
to a clean ground, but a break 49 is provided in the cir- 
cuitry in order to break the shield loop within this partic- 
uter node. 

[0041] In use, a generator within each of the pro- 
grammable devices In the controller area n^work 10 
generates differential bus signals. Said differential bus 
signals are encoded with voltage and timing data, which 
are required by each of the other programmable devices 
wrthin the CAN 10. 

[0042] During periods when no data are transmitted 
around the bus 11 by the programmable devices, the 
differential bus signals are in a "recessive" state. In this 
recessive state, the bus signal wires 12, 1 3 are undriven 
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and the differential voftage between them Is zero. 
[0043] During periods when data Is transmitted 
around the bus 11 by the programmable devices, the 
differential bus signals are in a "dominant" state. In this 
dominant state, the bus signal wires 12, 13 are driven s 
and the differential voltage between them Is greater 
than a chosen value. 

[0044] Each of the programmable devices includes 
a differential signal indicator to enable it to distinguish 
between the recessive state and the dominant state of io 
the bus 1 1 . 

[0045] The data, that are communicated around the 
bus 1 1 in the form of the differential bus signals, deter* 
mines the instructions that are relayed by the CAN con- 
troller 39, concerning each of the programmable is 
devices, via the transceiver circuit 35, to the active ter- 
mination circuit 25 of each of the programmable 
devices. 

[0040] In nonnal operation the CAN 10 is termi- 
nated in either the first mode (Figure 3A) or the second so 
mode (Figure 3C) within one of the nodes 14-20 (desig- 
nated the "terminating mode"), whilst the remaining 
nodes 14-20 operate in the transparent mode (Figure 
3B). This provides for conventional tennination of the 
bus signal wires 12, 13, In order to prevent back reflec- 25 
tion of any of the diffisrential bus signals, and allows all 
of the programmable devices to conwnunicate via the 
bus 11. 

[0047] In the terminating node, the specific mode of 
termination is dependent upon whether data is being 3a 
transmitted or received by the programmable device 
contained within the node. 

[0048] A counter Included within a fault detector of 
each of the programmable devices records abnormali- 
ties encountered by a programmable device when It 35 
attempts to transmit differential bus sfgnals around the 
bus 11, These problems may arise from a fault in the 
bus 1 1 or due to a fault in a programmable device. Each 
abnormality encountered results in an incremental 
Increase of the count recorded by the counter. This 40 
count is reset to zero when the tractor Is powered down. 
[0049] Each programmable device is programmed 
such that If the count recorded by its counter reaches 32 
or more it stops communicating via the bus 1 1 with the 
other prognammable devices. When at least one of the 45 
programmable devices stops communicating around 
the bus 1 1 as aforesaid, an Isolator within each of the 
programmable devices isolates and checks each 
branch or segment of the bus 1 1 in turn. Once the loca- 
tion of the fault is found the switch driver drives the so 
switches to terminate the CAN 10 on either side of the 
fault, so that the remainder of the CAN 1 0 may continue 
to function. This isolating and checking process is 
referred to as synchronous recovery of the CAN 10. 
[0050] As well as transmitting dfferentiat bus sig- 55 
nals around the bus 11, each of the programmable 
devices Includes a transmitter for transmitting network 
management messages around the bus, and a receiver 
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for receiving these messages. The network manage- 
ment nrressages are unique and individual for each of 
the programmable devces. They contain data that 
Infomi the other programmable devices whether the 
programmable device transmitting the message is still 
functioning correctly. The receiver of each of the pro- 
grammable devk^es monitors incoming network man- 
agement messages during the Ignition of the vehicle, 
normal running of the vehicle, engine cranking of the 
vehicle and powering down of the vehicle. 
[0051 ] The instrument cluster programmable device 
detects normal running phases of the tmctor, and during 
engine cranking of the vehicle, it disables its fault detec- 
tor, and includes data within its network management 
messages to inform the other programmable devices to 
do the same. Once the engine cranking phase of the 
vehicle has been completed, the instalment cluster pro- 
grammable device ng-enables its fault detector, and 
changes its network management message once again 
to inform the other programmable devices to do the 
same. 

[0052] Each of the programmable devtees transmits 
two network management messages in every 260ms 
time period. If a programmable device does not receive 
either of the two network management messages within 
the 250nDS time period from another of the programnna- 
ble devices, then a memory wlttiin this programmable 
device records the other programmable devce as being 
"missing". 

[0053] If only one of the two network management 
messages of the other programmable device is received 
within the 250ms time period, then the memory within 
the receiving programmable device records the other 
programmable device as having an intemiittent fault. 
Similarly, if the network management messages 
received from the other programmable devk^es contain 
parameters which are Inconsistent with the parameters 
that are transmitted by the receiving programmable 
device, then the memory within the receiving program- 
mable devtee records the other programmable devce 
as being "inconsistent*. 

[0054] If a memory within one of the programmable 
devices records one of the other programmable devices 
as missing, then the network management message of 
this particular programmable device Is altered to Inform 
the other programmable devices of this occurrence. A 
monitor within the fault detector of each of the program- 
mable devices then monitors the pnogrannmable devices 
that are connected to the immediate left and to the 
immediate right of its programmable device In the CAN 
10. If the monitor of a programmable device detects a 
missing programmable device to its immediate left or to 
its immediate right, then the CAN controller 39 of this 
programmable device directs its node 14-20 to termi- 
nate the CAN 10 in the relevant termination mode (Figs. 
3A and 3C). If the monitor of a programmable devkje 
does not detect a missing programmable device to its 
immediate right or to its immediate left, then the CAN 
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controller 39 of this programmable device directs its 
node 14^20 to operate in tfie transparent mode (Rgure 
3B). 

[0055] Once a missing programmable device has 
been Isolated In the CAN 1 0, then each of the remaining 5 
programmable devices substitutes defauit values for the 
data which they no longer receive from this programma- 
ble device. Consequently the CAN 10 continues func- 
tioning following detection of a fault. 
[0056] This process of isolating a non-functioning io 
programmable device is refen^ed to as asynchronous 
recovery of the CAN 10. If during synchronous recovery 
of the CAN 10, activated by a fault in one of tha pro- 
grammable devices or in the CAN 10, a programmable 
device Is detected as being missing, the synchronous is 
recovery of the CAN 10 is disabled and an asynchro- 
nous recovery of the CAN 10 (as described above) will 
be activated. 

[0057] Thus in the CAN 1 0 of the invention, a single 
fault within the bus 1 1 results in the synchronous recov- so 
eryoftheCAN 10. and the CAN 10 continues to operate 
at its full capability. A non-functioning programmable 
device results in the asynchronous recovery of the CAN 
10, and the CAN 10 continues to function using default 
data values for the data from the non-functioning pro- 25 
grammable device. 

[0058] Further faults in the bus 1 1 . and the Isolation 
of still another programmable device, will not cause the 
CAN 1 0 to fail, since the programmable devices will sub- 
stitute default values for the data that they are missing. 30 
This means that a number of the programmabfe devices 
Will be able to function integrally with each other, and 
will not function Independentiy of each other until they 
are completely isolated from each other by the termina- 
tion of the CAN 1 0 at every node 1 4-20. 35 

Claims 

1. A CAN (10) including a plurality of nodes (14-20), 
the CAN (10) having a bus (11) including two or 40 
more signal wires (12. 13) the ends of which at 
each node define respective first and second Ixjs 
terminations (21-24), each node (14-20) including : 

switches (29, 30) for optionally connecting the 45 
first and second ends (21-24) of each respec- 
tive signal wire (12. 13) together, whereby the 
node (14-20) is operable in a transparent 
mode; 

switches (29, 30) for connecting a temninating so 
resistor (40. 41) between two signal wires (12, 
1 3) selectively at either the first tennination or 
the second termination; 
a programmable device (-) operatlvely connect- 
able to the bus (1 1 ); and 55 
switches (31, 32) for connecting the program- 
mable device selectively to either the first termi- 
nation or the second termination; and 
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characterized in Itrat: 

said switches (29-30) operate under the control 
of the programmable devices; and 
a plurality of the programmable devices each 
Include a fault detector (-) for detecting faults in 
the CAN (10), the prograinnnable devices being 
such as to select, on detection of a fault by a 
said fault detector, at each node (14-20) : temir- 
nation of the CAN (1 0) at the first or second ter- 
mination (21 -24); or transparency of the node 
(14-20), whereby to permit continuous func- 
tioning of at least part of the CAN (10) regard- 
less of the number or nature of the faults. 

2. A CAN (10) according to claim 1, characterized in 
that the bus (11) is an annular network. 

3. A CAN (1 0) according to cterms 1 or 2. character- 
ized in that the terminating resistor (40, 41 ) is a volt- 
age divider. 

4. A CAN (10) according to any of the preceding 
claims, characterized in that the CAN (10) is pro- 
grammable to allow nodes (14-20) to be removed 
from the bus (11) widiout a need to reconfigure the 
bus (1 1) or remaining rrodes (14-20). 

5. A CAN (10) according to any of the preceding 
claims, characterized in that the CAN (10) is pro- 
grammable to allow nodes (14-20) to be added, up 
to a maximum of 30, without a need to reconfigure 
the bus (1 1) or remaining nodes (14-20). 

6. A CAN (10) according to any of the preceding 
dalnrts, characterized in that each of the program- 
mable devices Includes a generator (-) for generat- 
ing differential bus signals encoded with voltage 
and timing data to be transmitted via the bus (11). 

7. A CAN (10) according to claim 6, characterized In 
that the fault detector of each of the programmable 
devices Includes a counter (-) which records the 
number of errors it encounters during transmission 
of differential bus signals via the bus (1 1), whereby 
a said programmable device stops communicating 
with the other programmable devices in tiie CAN 
(10) when the nimiber of communication errors 
recorded by its counter equals or exceeds a prede- 
termined value. 

8. A CAN (10) according to claim 7, characterized in 
that each of the programmable devices Includes an 
isolator (-) for isolating a part of the bus (11) and 
wherein the CAN (10) includes means for sequen- 
tially checking the parts of the bus (11) when at 
least one of the programmable devices stops com- 
municating with the other programmable devices in 
the CAN (10). 
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9. A CAN (10) according to any of the preceding 
claims, characterized in that each said fault detec* 
tor includes ; 



a transmitter (-) for transmitting unique and s 
Individual network management messages; 
and 

a receiver (-) for receiving and monitoring net- 
work management messages transmitted by 
the other programmable devices In the CAN io 
(10). 

10. A CAN (10) according to claim 9, characterized In 
that the fault d^ector of each of the programmable 
devices Includes : 

a memory (-) for recording one of the other pro- 
grammable devices in the CAN as "missing" If it 
fails to receive at least one network manage- 
ment message transmitted by the other pro- 20 
grammable devtee within a chosen time period; 
a memory for recording one of the other pro- 
grammable devices in the CAN as having an 
intermittent fault if it fails to receive all of a cho- 
sen number of network management mes- 25 
sages transmitted by the other programmable 
device within a chosen time period; and 
- a memory for recording one of the other pro- 
grammabte devtees In the CAN as "Inconsist- 
ent" If it receives a network management 30 
message transmitted by the other programma- 
ble devk^e which omits parameters compatible 
with those transmitted by It. 

11. A CAN (10) according to claim 10, characterized in 3s 
that the fault detector of each of the programmable 
devices includes a monitor (-) for monitoring the 
status of the programmable devices connected to 

Its immediate left and immediate right In the bus 
when a programmable device is recorded as miss- 40 
ing in the CAN (10), said monitor causing the CAN 
(10) to terminate at the first or second termination 
{21-24) of its node (14-20) If It Is connected to a 
missing programmable device and causing the 
CAN ( 1 0) to select transparency of Its node (1 4-20) 4S 
otherwise. 

12. A CAN (1 0) according to claim 1 1 , characterized in 
that the programmable devices are programmed 
such that, following recording of a programmable so 
device as missing, the remaining programmable 
devices substitute default data for the missing pro- 
grammable device to enable the CAN (10) to con- 
tinue functioning. 



PACE 27/43 ' RCVD AT 8/4/2006 1:36:22 PM (Eastern Daylight Time] • SVR:USPTO-EFXRF-5/5 - DN)S:2738300 * CSID:203 761 1924 ■ DURATION (mm-ss): 08-20 



08/04/2006 12:58 FAX 203 761 1924 



GE INFRASTRUCTURE 
EP1 069 733 A2 



ia028 




PACE 28/43 ' RCVD AT 8/4/2006 1 :36:22 PM [Eastern DayligW Time) * SVR:USPTO-EFXRF-5/5 • DNIS:273830D • CSID:203 761 1924 • DURATION (mm-«s>:08-20 



08/04/2006 12:58 FAX 203 761 1924 



GE INFRASTRUCTURE 
EP 1 069 733 A2 



BI029 



21. 
12 \ 



22 >. 



J3 \ 



44. 

43 \ 



i3 ^ 



51 V 
50 \ 



12A 



13A 



1 



25 



1 ! 



38 



39 



.35 



.23 
/ 12 



24 

/ 13 



'52 



50 



nG.2 



PACE 29/43 • RCVD AT 8/4/2006 1 :36:22 PM [Eastern Daylight TImeJ * SVR:USPTO-CTXRF-5/5 * DNIS:2738300 • C8ID:203 761 1d24 • DURATION (mm-ss):08-20 



08/04/2006 12:5 8 FAX 203 761 1924 



GE INFRASTRUCTURE 
EP 1 069 733 A2 



@030 



21 
22' 



12A 



ISA 



33 



29 

\ B 



40 



31 

A\ / B 



26 



37- 



.30 



X 



41 

ir 

32 
B 



12A 



13A 



34 



23 
*24 



3B 









36 


39 







F<G. 3A 



PACE 30/43 * RCVD AT 8/4/2006 1:36:22 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-5/5 * DNIS:273«300 * CSID:203 761 1924 ' DURATION (nim-ss):08-20 



08/04/2006 12:58 FAX 203 761 1924 GE INFRASTRUCTURE g)031 

EP 1 069 733 A2 



21 

22" 



12A 



13A 



36 

33- 



29 



40 



31 

A\ / B 



37- 



26 



/ 



41 



32 



Ar 



B 



12A 

— __^23 
13A 24 



34 



3B 









35 


39 







FIG. 3B 



PAGE 31/43 ' RCVD AT W4/2006 1 :36:22 PM [Eastern Daylight TImel * SVR:USPTaEFXRF-S/5 • DN1S:2738300 • CSID:203 761 1924 * DURATION (mm-ss):08-20 



08/04/2006 12:58 FAX 203 761 1924 



. GE INFRASTRUCTURE 
EP 1 069 733 A2 



@032 



21 

22' 



12A 



13A 



36 
33 



26 



29 



/ 



12A 



37- 



40 

Dp 



31 



.30 



Ah 



41 



32 



Ar-- 



B 



38 





35 


39 











FIG. 3C 



PACE 32/43 • RCVD AT 8/4/2006 1 :36:22 PM [Eastern Daylight TlmeJ • SVR:USPTO-EFXRF.5/5 * DNIS:2738300 • CSID:203 761 1924 • DURATION (mm-ss):08-20 



08/04/2006 12:58 FAX 203 761 1924 



GE INFRASTRLXTURE 
EP 1 069 733 A2 



@033 




FIG- 4 



PACE 33/43 • RCVD AT 8W/2006 1:36:22 PM [Eastern Daylight Time} * SVR:USPTO-EFXRF-5/5 • DN18:2738300 • CSID:203 761 1924 • DURATION (mm^s):08-20 



08/04/2006 12:58 FAX 203 761 1924 GE INFRASTRUCTURE lg|034 

EP 1 069 733 A2 



46 



044 



-045 



M7 



-48 



FIG. 5A 



044 
045 

-47A 
~--48A 




FIG. 5B 



49 




PAGE 34/43 * RCVD AT 8/4/2006 1:36:22 PM [Eastern Daylight Time] ' 8VR:USPT0-EF)a<F-S/5 • DNIS:2738300 * CSID:203 761 1924 ' DURATION (nfiin-ss):0S-20 



